Privacy Policy

Misenly LLC, an Illinois limited liability company ("Misenly", "we", "us", "our"), collects and controls the data described in this policy.

Account information. Your name, email address and a hash of your password. If you sign in with Google or Apple, we receive the name, email address and account identifier that provider shares with us; Apple may give us a private relay address instead of your real one. We never see your Google or Apple password.

Health information. The allergens and dietary preferences you enter are health information. We collect them only to warn you about recipes that may conflict with them and to filter what you see, and only with your consent: entering them is optional, and you can clear them at any time in Settings.

What you save. The recipes you add to your Recipe box (including a link you paste or text you type in), the notes you write, the meals you place on your Plans calendar, your shopping list, and the pantry items you save.

People you invite. If you invite someone to your household, we collect the email address you enter for them so we can send the invitation, and we tell them who invited them.

Technical data. Your IP address, browser or device type, the pages you request and when, error reports, and rate-limit hits. A signed-in session record keeps your IP address and browser identifier until the session ends. When you create an account we also store the campaign tags (utm parameters), the referring site (address only, without its query string) and the landing page of your first visit.

We use your information to operate and improve the Service: saving your recipes, placing them on your Plans calendar, building your shopping list and the shoppable Instacart links you open from it, reading recipe text you paste in so it can be saved as a recipe, warning you about allergens, sending household invitations and transactional emails (account verification, password reset), checking that a sign-up comes from a person and not a script, finding and fixing errors, and enforcing fair-use limits. Product analytics uses usage events tied to your account's id, never your name, email or the contents of your recipes, and we look at them in aggregate to understand how the product is used. We do not use your information for advertising.

We do not sell your personal information. We share data with processors strictly as needed to deliver the Service: our hosting providers (Railway, Cloudflare), our AI provider (Anthropic, which reads the recipe text you paste in, or the caption of a social media post whose link you paste, with any title and link that come with it, to pull out the recipe, and may read the name and notes of a recipe you type in to suggest its cuisine, meal type and difficulty; Anthropic processes this under their enterprise data terms), our email provider (Resend, which receives the email addresses we send to), and Instacart, which generates the shoppable links you open from your shopping list. Each processor is bound by a data-protection agreement.

We use Sentry for error monitoring. When something goes wrong, Sentry receives a report with the error, the page you were on and your browser or device details, so we can fix it. We configure it so it never receives your email, your name, your cookies or your sign-in credentials.

In the iPhone app, when an error occurs, Sentry also receives a short recording of the screens leading up to it, sent along with the error report. The app masks all text and images in the recording. We use it only to diagnose the fault. The app does not record your screen at any other time, and the website does not record your screen.

When you create an account, Cloudflare Turnstile runs in your browser to tell people from bots. Cloudflare receives the technical signals it needs to make that decision, under its own privacy policy. It does not receive your name or email.

If Discover recipe search is available in your app, the search text you type and the id of any recipe you open are sent to Spoonacular, the third-party recipe database that powers it, to run that search or fetch that recipe. Nothing else about your account or activity is shared with them. If you save a Spoonacular result to your Recipe box, we store only its title, image, and id; Spoonacular's terms do not allow us to keep the ingredients or instructions, so those are fetched fresh from Spoonacular each time you view that recipe.

When you open a shoppable link, Instacart receives the items on your list. If you then buy through Instacart, Misenly may earn a commission through Instacart's affiliate program, which is run by Impact.com. The report we receive may include the order's date and value, your country, whether you were a new Instacart customer, and possibly the items ordered. It never includes your name or contact details, and we do not match it to your Misenly account. The price you pay is not affected.

We set first-party cookies for authentication (HttpOnly, SameSite= Lax) and for product analytics (a random PostHog identifier), and use browser storage to remember non-PII UI preferences. We do not deploy third-party advertising cookies.

We use PostHog to understand how the Service is used. It receives: the pages you view; product events such as saving a recipe, adding something to a shopping list, or opening an Instacart link; a random device id before you sign in, and your account id after. We never send PostHog your email, your name, or the contents or URLs of recipes you save.

Of the first-visit details we store (section 1), only the campaign source label is shared with PostHog, attached to the sign-up event.

When you search for recipes, on the website or in the iPhone app, the words you type are sent to PostHog with your account's usage data. We use them to understand what people look for and to improve search.

We keep your account information and what you save for as long as your account exists. Technical logs and error reports, including the recordings described in section 3, are kept for no more than 90 days. Internal audit records, such as a record that an AI feature was used or that a sign-up was blocked, are deleted after 90 days. Product analytics events are kept for 12 months and then deleted. The first-visit details are kept with your account. Shoppable links expire on Instacart's side 30 days after they are created.

When you delete your account or any data, we remove it from the live service right away. We also ask PostHog to delete your analytics profile and events; PostHog removes the profile promptly and clears the events in its next deletion run, which can take a few weeks. Audit records are unlinked from your account right away, and identifying text in them is removed. Records of administrative actions, such as acting on a copyright complaint, are kept for as long as we need them for that purpose and for legal obligations, without your account attached once you delete it. Encrypted backups we keep for disaster recovery may still hold a copy for up to 35 days, after which it is permanently deleted. We restore from backups only to recover from an outage or data loss, never to bring back data you deleted.

Our servers are in the United States. If you use the Service from elsewhere, your information is transferred to and processed in the United States, where the privacy laws may differ from those where you live. Where the law requires it, we rely on standard contractual clauses or an equivalent safeguard with our processors.

Data moves between your device and our servers over TLS. Passwords are stored only as salted hashes. Backups are encrypted, and access to production systems is limited to the people who run the Service. No method of storage or transmission is completely secure; if a breach affects your personal information we will tell you as the law requires.

Depending on where you live (GDPR, CCPA, and similar regimes) you have rights to access, correct, export, or delete your personal data. On the web and in the iOS app you can download everything you have saved from Settings → Your data → Download my recipes, or delete your account from Settings → Your data → Delete account; for anything else email [email protected]. We will not treat you differently for exercising a right.

California. We collect the categories of personal information listed in section 1: identifiers, account details, health information, the content you save, and internet activity. We do not sell or share your personal information as California law defines those terms, and we use sensitive personal information only to provide the Service you asked for. You may ask us what we hold about you, ask us to delete or correct it, and use an authorized agent to make the request.

Europe and the United Kingdom. Our legal bases are: performing our contract with you (operating the Service), your consent (health information and non-essential cookies, which you can withdraw at any time), and our legitimate interests in keeping the Service secure and understanding how it is used. You may object to processing based on legitimate interests, ask us to restrict processing, and lodge a complaint with your local supervisory authority.

Your recipes are yours. Export everything as a file at any time from Settings. If Misenly ever shuts down, we will give you as much notice as we reasonably can, and a chance to export everything before the end.

The Service is not directed at children, and you must be at least 16 to use it. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, email us and we will delete it.

When we change this policy we post the new version here with a new date. If a change meaningfully affects how we use your personal information, we will tell you by email or in the app before it takes effect.

Privacy questions or concerns? Email [email protected]. We respond within 30 days.